[Pacemaker] How SuSEfirewall2 affects on openais startup?

[Lars Ellenberg]

On Fri, May 14, 2010 at 09:40:28AM +0300, Aleksey Zholdak wrote:
> >The sbd daemon needs to be running on both nodes (the openais init script
> >should take care of that on SLES), but there only needs to be one sbd
> >primitive, it does not need to be cloned.  Pacemaker will make sure it
> >is running somewhere, which is enough.
> 
> What you tell about? sbd must be running on _each_ node, not "somewhere"!

Think of "sbd must be running on _each_ node" as
"network power switch port needs to be accessible from every where",
and of "sbd _primitive_" (stonith resource agent) "running somewhere"
as "the telnet that will tell the power switch to reset some node".
One telnet is enough, as long as it can reach the power switch.
And several telnets may interfere, and likely report failure,
if the power switch only supports one connection at a time.
(Which, in a way, is true for SBD daemon).
So please: do not clone SBD.

-- 
: Lars Ellenberg
: LINBIT | Your Way to High Availability
: DRBD/HA support and consulting http://www.linbit.com

DRBD® and LINBIT® are registered trademarks of LINBIT, Austria.